--- title: GitLab Orbit: Find vulnerability blast radius without... description: GitLab Orbit is now generally available, mapping which projects, owners and pipelines a vulnerability touches through a single query. Orbit builds a graph from... canonical: https://daily.dev/posts/gitlab-orbit-find-vulnerability-blast-radius-without-the-manual-hunt-ughgl39ns twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitLab Orbit: Find vulnerability blast radius without the manual hunt | daily.dev og:description: GitLab Orbit is now generally available, mapping which projects, owners and pipelines a vulnerability touches through a single query. Orbit builds a graph from... og:url: https://daily.dev/posts/gitlab-orbit-find-vulnerability-blast-radius-without-the-manual-hunt-ughgl39ns og:image: https://api.daily.dev/og/posts/uGhGl39nS.png og:image:alt: GitLab Orbit: Find vulnerability blast radius without the manual hunt og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitLab Orbit: Find vulnerability blast radius without the manual hunt **[GitLab](https://daily.dev/sources/gitlab)** · 9 min read · 0 upvotes · 0 comments ## Summary GitLab Orbit is now generally available, mapping which projects, owners and pipelines a vulnerability touches through a single query. Orbit builds a graph from GitLab's existing merge requests, pipelines, deployments and security findings, so agents can answer blast-radius questions instead of crawling repositories by hand. In GitLab's own testing with the same model, agents using Orbit were up to 11 times faster, used up to 4.5 times fewer tokens, and needed up to 45 times fewer retries. Access follows existing roles, and external agents like Claude Code and Codex can reach the graph via MCP. Orbit is available now for Premium and Ultimate customers on GitLab.com, with Self-Managed and Dedicated rollout coming over the following weeks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What performance improvement does GitLab Orbit give AI agents when investigating vulnerabilities compared to not having it? Agents running through GitLab Orbit were up to 11 times faster, used up to 4.5 times fewer tokens, and needed up to 45 times fewer retries than agents without it, according to GitLab's own testing on the same tasks using the same model. This is because Orbit lets agents answer from a pre-built graph instead of crawling repositories and stitching together API calls. _Teams weighing agent-assisted vulnerability triage can track tooling comparisons like this on daily.dev._ ### Which plans include GitLab Orbit and when is it available? GitLab Orbit is generally available for Premium and Ultimate customers, starting with GitLab.com immediately and reaching GitLab Self-Managed and GitLab Dedicated over the coming weeks. Customers can try it free for 30 days through their GitLab account team, and new customers can request an Orbit trial when starting a paid plan. _Developers evaluating GitLab's security tooling rollout can follow release details like this on daily.dev._ ### How can external AI coding agents like Claude Code or Codex access GitLab's vulnerability and ownership data? External agents such as Claude Code and Codex can reach GitLab Orbit's graph of code, merge requests, pipelines, security findings, and ownership data over MCP (Model Context Protocol). Access to that data follows the same roles already configured in GitLab, so agents see only what they are permitted to see. _Developers connecting AI agents to internal systems via MCP can follow integration patterns like this on daily.dev._ ## Similar posts on daily.dev - [GitLab Orbit is GA: Higher agent accuracy, lower token cost](https://daily.dev/posts/gitlab-orbit-is-ga-higher-agent-accuracy-lower-token-cost-lsjfoc98l) · GitLab · 0 upvotes · 0 comments - [GitLab Transcend Hackathon: What developers built on GitLab Orbit](https://daily.dev/posts/gitlab-transcend-hackathon-what-developers-built-on-gitlab-orbit-lhajgd46q) · GitLab · 0 upvotes · 0 comments - [GitLab Extends Agentic AI with New Automated Security Remediation, Pipeline Setup, and Delivery Analytics](https://daily.dev/posts/gitlab-extends-agentic-ai-with-new-automated-security-remediation-pipeline-setup-and-delivery-anal-v9xr4v7zm) · SD Times · 0 upvotes · 0 comments - [How exposed is your code? Find out in minutes—for free](https://daily.dev/posts/how-exposed-is-your-code-find-out-in-minutes-for-free-uh0cpjdxe) · GitHub Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#php](https://daily.dev/tags/php), [#gitlab](https://daily.dev/tags/gitlab) [View this post on daily.dev](https://daily.dev/posts/gitlab-orbit-find-vulnerability-blast-radius-without-the-manual-hunt-ughgl39ns) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitLab Orbit: Find vulnerability blast radius without the manual hunt","url":"https://daily.dev/posts/gitlab-orbit-find-vulnerability-blast-radius-without-the-manual-hunt-ughgl39ns","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/gitlab-orbit-find-vulnerability-blast-radius-without-the-manual-hunt-ughgl39ns"},"datePublished":"2026-10-29T12:13:46.889Z","dateModified":"2026-10-29T12:14:16.453Z","description":"GitLab Orbit is now generally available, mapping which projects, owners and pipelines a vulnerability touches through a single query. Orbit builds a graph from...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/11b21e8bc5f537b5ae48e7526b517ef0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/11b21e8bc5f537b5ae48e7526b517ef0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitLab","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitLab","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3720ce340ca4435daef529abbf361b69","url":"https://daily.dev/sources/gitlab"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/gitlab-orbit-find-vulnerability-blast-radius-without-the-manual-hunt-ughgl39ns","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,php,gitlab","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitLab","item":"https://daily.dev/sources/gitlab"},{"@type":"ListItem","position":3,"name":"GitLab Orbit: Find vulnerability blast radius without the manual hunt"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/gitlab-orbit-find-vulnerability-blast-radius-without-the-manual-hunt-ughgl39ns#faq","mainEntity":[{"@type":"Question","name":"What performance improvement does GitLab Orbit give AI agents when investigating vulnerabilities compared to not having it?","acceptedAnswer":{"@type":"Answer","text":"Agents running through GitLab Orbit were up to 11 times faster, used up to 4.5 times fewer tokens, and needed up to 45 times fewer retries than agents without it, according to GitLab's own testing on the same tasks using the same model. This is because Orbit lets agents answer from a pre-built graph instead of crawling repositories and stitching together API calls. Teams weighing agent-assisted vulnerability triage can track tooling comparisons like this on daily.dev."}},{"@type":"Question","name":"Which plans include GitLab Orbit and when is it available?","acceptedAnswer":{"@type":"Answer","text":"GitLab Orbit is generally available for Premium and Ultimate customers, starting with GitLab.com immediately and reaching GitLab Self-Managed and GitLab Dedicated over the coming weeks. Customers can try it free for 30 days through their GitLab account team, and new customers can request an Orbit trial when starting a paid plan. Developers evaluating GitLab's security tooling rollout can follow release details like this on daily.dev."}},{"@type":"Question","name":"How can external AI coding agents like Claude Code or Codex access GitLab's vulnerability and ownership data?","acceptedAnswer":{"@type":"Answer","text":"External agents such as Claude Code and Codex can reach GitLab Orbit's graph of code, merge requests, pipelines, security findings, and ownership data over MCP (Model Context Protocol). Access to that data follows the same roles already configured in GitLab, so agents see only what they are permitted to see. Developers connecting AI agents to internal systems via MCP can follow integration patterns like this on daily.dev."}}]} ```